Ensuring that the actions of a set of people, applications and systems follow the organization's rules is BEST described as:

Which of the following functions evaluates risk present in IT initiatives and/or systems when implementing an information security program?

A system was hardened at the Operating System level and placed into the production environment. Months later an audit was performed and it identified insecure configuration different from the original hardened state.
Which of the following security issues is the MOST likely reason leading to the audit findings?

A Security Operations Centre (SOC) manager is informed that a database containing highly sensitive corporate strategy information is under attack. Information has been stolen and the database server was disconnected.
Who must be informed of this incident?

File Integrity Monitoring (FIM) is considered a